PT-2019-13455 · Matrixssl · Matrixssl

Keegan Ryan · Publicado 2019-10-03 · Atualizado 2021-07-21 · CVE-2019-13629

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MatrixSSL versions 4.2.1 and earlier

Description The issue is a timing side channel in ECDSA signature generation, which allows a local or remote attacker to compute the private key used by measuring the duration of hundreds to thousands of signing operations. This occurs due to a leak of the bit length of the scalar in the scalar multiplication in crypto/pubkey/ecc math.c.

Recommendations For MatrixSSL versions 4.2.1 and earlier, consider disabling the ECDSA signature generation functionality until a patch is available to prevent exploitation of the timing side channel. Restrict access to the ecc math.c module to minimize the risk of exploitation. Avoid using the affected scalar multiplication function in the ECDSA signature generation process until the issue is resolved.

Correção

Use of a Broken Cryptographic Algorithm

Side Channel Attack

Enumeração de Fraquezas

CWE-327

CWE-203

Identificadores relacionados

CVE-2019-13629

Produtos afetados

Matrixssl

Referências · 6

• http://openwall.com/lists/oss-security/2019/10/02/2 · Nota
• https://minerva.crocs.fi.muni.cz · Nota
• https://osv.dev/vulnerability/CVE-2019-13629 · Aviso do Fabricante
• https://eprint.iacr.org/2011/232.pdf · Nota
• https://tches.iacr.org/index.php/TCHES/article/view/7337 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13629 · Nota de Segurança